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The main conjecture for CM elliptic 
curves at supersingular primes 

By Robert Pollack and Karl Rubin* 



Abstract 

At a prime of ordinary reduction, the Iwasawa "main conjecture" for ellip- 
tic curves relates a Selmer group to a p-adic L-function. In the supersingular 
case, the statement of the main conjecture is more complicated as neither the 
Selmer group nor the p-adic -L-function is well-behaved. Recently Kobayashi 
discovered an equivalent formulation of the main conjecture at supersingular 
primes that is similar in structure to the ordinary case. Namely, Kobayashi's 
conjecture relates modified Selmer groups, which he defined, with modified p- 
adic L-functions defined by the first author. In this paper we prove Kobayashi's 
conjecture for elliptic curves with complex multiplication. 



Introduction 

Iwasawa theory was introduced into the study of the arithmetic of elliptic 
curves by Mazur in the 1970's. Given an elliptic curve E over Q and a prime p 
there are two parts to such a program: an Iwasawa-Selmer module contain- 
ing information about the arithmetic of E over subfields of the cyclotomic 
Zp-extension Qoo of Q, and a p-adic L-function attached to E, belonging to 
a suitable Iwasawa algebra. The goal, or "main conjecture", is to relate these 
two objects by proving that the p-adic L-function controls (in precise terms, 
is a characteristic power series of the Pontrjagin dual of) the Iwasawa-Selmer 
module. The main conjecture has important consequences for the Birch and 
Swinnerton-Dyer conjecture for E. 
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For primes p where E has ordinary reduction, 

• Mazur introduced and studied the Iwasawa-Selmer module [Ma], 

• Mazur and Swinnerton-Dyer constructed the p-adic L- function [MSD] , 

• the main conjecture was proved by the second author for elliptic curves 
with complex multiplication [Ru3], 

• Kato proved that the characteristic power series of the Pontrjagin dual 
of the Iwasawa-Selmer module divides the p-adic L- function [Ka]. 

The latter two results are proved using Kolyvagin's Euler system machinery. 

For primes p where E has supersingular reduction, progress has been much 
slower. Using the same definitions as for the ordinary case gives a Selmer mod- 
ule that is not a torsion Iwasawa module [Rul], and a p-adic L-function that 
does not belong to the Iwasawa algebra [MTT], [AV]. Perrin-Riou and Kato 
made important progress in understanding the case of supersingular primes, 
and independently proposed a main conjecture [PR3], [Ka]. 

More recently, the first author [Po] proved that when p is a prime of super- 
singular reduction (and either p > 3 or a p = 0) the "classical" p-adic L-function 
corresponds in a precise way to two elements Cg,£g of the Iwasawa alge- 
bra. Shortly thereafter Kobayashi [Ko] defined two submodules Sel p (E/Qoq), 
Sel~(i?/Q 00 ) of the "classical" Selmer module, and proposed a main con- 
jecture: that £% is a characteristic power series of the Pontrjagin dual of 
Selp (E/Qoo). Kobayashi proved that this conjecture is equivalent to the Kato 
and Perrin-Riou conjecture, and (as an application of Kato's results [Ka]) 
that the characteristic power series of the Pontrjagin dual of Selp (E/Qoo) 
divides L\. 

The purpose of the present paper is to prove Kobayashi's main conjecture 
when the elliptic curve E has complex multiplication: 

Theorem. If E is an elliptic curve over Q with complex multiplication, 
and p > 2 is a prime where E has good supersingular reduction, then is a 
characteristic power series of the Iwasawa module Hom(Selp (E/Qoo), Q p /Z p ). 

See Definition 3.3 for the definition of Kobayashi's Selmer groups 
Selp (E/Qoo), and Section 7 for the definition of Cjj,. With the same proof (and 
a little extra notation) one can prove an analogous result for Sel^ (£ , /Q(/x p00 )), 
the Selmer groups over the full p-cyclotomic field Q(/i„oo). 

The proof relies on the Euler system of elliptic units, and the results and 
methods of [Ru3] which also went into the proof of the main conjecture for 
CM elliptic curves at ordinary primes. We sketch the ideas briefly here, but 
we defer the precise definitions, statements, and references to the main text 
below. 
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Fix an elliptic curve E denned over Q with complex multiplication by an 
imaginary quadratic field K, and a prime p > 2 where E has good reduction 
(ordinary or supersingular, for the moment). Let p be a prime of K above p, 
and let % = K(E[p°°]), the (abelian) extension of K generated by all p-power 
torsion points on E. Class field theory gives an exact sequence 

(1) — >£/C ^U/C — > X — > A — > 

where U, £, and C are the inverse limits of the local units, global units, and 
elliptic units, respectively, up the tower of abelian extensions K(E[p n ]) of K, 
and X (resp. A) is the Galois group over K(E[p°°]) of the maximal unrami- 
fied outside p (resp. everywhere unramified) abelian p-extension of K(E[p°°]). 
Further 

(a) the classical Selmer group Selp(E/X) = Hom(X, E[p°°]), 

(b) the "Coates- Wiles logarithmic derivatives" of the elliptic units are special 
values of Hecke L-functions attached to E, 

(c) the Euler system of elliptic units can be used to show that the (torsion) 
Iwasawa modules £/C and A have the same characteristic ideal. 

If E has ordinary reduction at p, then U/C and X are torsion Iwasawa 
modules. It then follows from (1) and (c) that U/C and X have the same 
characteristic ideal, and from (b) that the characteristic ideal of U/C is a 
( "two- variable" ) p-adic L-function. Now using (a) and restricting to Qoo C % 
one can prove the main conjecture in this case. 

When E has supersingular reduction at p, the Iwasawa modules U/C and 
X are not torsion (they have rank one), so the argument above breaks down. 
However, Kobayashi's construction suggests a way to remedy this. Namely, one 
can define submodules V + ,V~ C U such that in the exact sequence induced 
from (1) 

— ► S/C — » U/(C + V ± ) — ► A'/image(V ± ) — ► A — » 

we have torsion modules U/(C + V ± ) and A'/imageC^ 111 ), and the Kobayashi 
Selmer groups satisfy 

(a') Sebt^/Qoo) = Hom(;r /image(V ± ), E[p°°}) G ^ . 

Using (b) (to relate U/(C + V ± ) with and (c) as above this will enable us 
to prove the main conjecture in this case as well. 

The layout of the paper is as follows. The general setting and notation 
are laid out in Section 1. Sections 2 and 3 describe the classical and Kobayashi 
Selmer groups, and Sections 4 and 5 relate Kobayashi's construction to local 
units, elliptic units, and L-values. Section 6 applies the results of [Ru3] to our 
situation. The proof of the main theorem (restated as Theorem 7.3 below) is 
given in Section 7, and in Section 8 we give some arithmetic applications. 
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1. The setup 

Throughout this paper we fix an elliptic curve E defined over Q, with 
complex multiplication by the ring of integers O of an imaginary quadratic 
field K. (No generality is lost by assuming that End(E) is the maximal order 
in K , since we could always replace E by an isogenous curve with this property.) 
Fix also a rational prime p > 2 where E has good supersingular reduction. As 
is well known, it follows that p remains prime in K. It also follows that 
a p = p + 1 — |_E(F p )| = 0, so we can apply the results of the first author [Po] 
and Kobayashi [Ko] . Let K p and O p denote the completions of K and O at p. 

For every k let E\p k ] denote kernel of p k in E(Q), E[p°°} = U k E\p k ], 
and T P (E) = \imE\p k ]. Let X = K(E[p°°}), let denote the (unique) 

Zp-extension of K, let Qoo C be the cyclotomic Z p -extension of Q, and 
let K cyc = KQoc C -ftToo be the cyclotomic Z p -extension of K. Let p denote 
the character 

p:G K ^knt 0p (E[p^])^0;. 

Let E denote the formal group giving the kernel of reduction modulo p on E. 
The theory of complex multiplication shows that E is a Lubin-Tate formal 
group of height two over O p for the uniformizing parameter —p. It follows that 
p is surjective, even when restricted to an inertia group of p in Gk- Therefore 
p is totally ramified in X/K and p induces an isomorphism Gal(X/K) = O p . 
We can decompose 

Gal(X/K) = A x T + x T_ 

where A = Ga^X/K^) Gal(K (E\p\) / K) is the non-p part of Gal(X/K), 
which is cyclic of order p 2 —l, and T± is the largest subgroup of Gal(X / K (E[p\)) 
on which the nontrivial element of Gal(K/Q) acts by ±1. Then r + and T_ 
are both free of rank one over Z p . 

Let M (resp. L) denote the maximal abelian p-extension of K(E[p°°]) 
that is unramified outside of the unique prime above p (resp. unramified 
everywhere), and let X = Gal(M/5C) and A = Gal(L/3C). If F is a finite 
extension of K in X let Of denote the ring of integers of F, and define sub- 
groups Cf C Ep C Uf C (Of <8> Z p ) x as follows. The group Up is the 
pro-p-part of the local unit group (Of <8> Z p ) x , Ep is the closure of the projec- 
tion of the global units O f into Uf, and Cf is the closure of the projection of 
the subgroup of elliptic units (as defined for example in §1 of [Ru3]) into Uf- 
Finally, define 

C = YmiCp C £ = limEp C U = liml^, 
inverse limit with respect to the norm map over finite extensions of K in X. 
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Class field theory gives an isomorphism Gal(M/L) = U/£. We summarize this 
setting in Figure 1 below. 





Figure 1. 

If K C F C X we define the Iwasawa algebra A(F) = Z p [[Gal(F/K)]]. In 
particular we have 

A(3C) = Z p [[Gal(X/K)}] = Z P [[A x T+ x r_]], 
A^oo) = Z p [[Gsl{K OB /K)]] = Z p [\T + xrJ l ], 
A(K cyc ) = Z p [[Gal(K cyc /K)}] * Z P [[T + }} Z p [[Gal(Qoo/Q)]]. 

We write simply A for A(K cyc ), and we write Aq(F) = A(F) ® O p and Aq = 
A ® O p . 

Definition 1.1. Suppose Y is a A(3C)-module. We define the twist 

Y^ 1 ) = Y®Rom (E[p° },K p /O p ). 

The module Homo(E\p°°], K p /O p ) is free of rank one over O p , and Gk acts 
on it via p' 1 . Thus we have T p (E)(p- 1 ) O p and S[p 00 ](p~ 1 ) ^ K p /O p . 
If K C F C X we define 

yj; = YO?- 1 ) ® A(3C) A(F) = Y(p _1 )/<7 - 1 : 7 G Gal(3C/F)>, 
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the F-coinvariants of Y(p~ l ). We will be interested in and Y£ . Con- 
cretely, if we write Z for the Ao(ET 00 )-submodule of Y <g> O p on which A acts 
via p, then can be identified with Z(p~ 1 ) and Y£ can be identified with 
(Z/(7* — p(^f*))Z)(p~ 1 ) where 7* is a topological generator of T_. 

2. The classical Selmer group 

For every number field F we have the classical p-power Selmer group 
Selp(E/F) C H 1 (F, E\p°°]) , which sits in an exact sequence 

— E(F) (Qp/Zp) — » Sel p (£/F) — m(E/F)\p°°] — > 

where LU(£'/F)[p 00 ] is the p-part of the Tate-Shafarevich group of E over F. 
Taking direct limits allows us to define Se\ p (E/F) for every algebraic extension 
F of Q. 

Theorem 2.1. Sel p (£/^ cyc ) ^ Hom (Af£ , K p /O p ). 

Proof. Combining Theorem 2.1, Proposition 1.1, and Proposition 1.2 of 
[Rul] shows that 

Sel p (£/K cyc ) Hom (^, J E[p 00 ]) Gal ( 3C /^) 

= Hom (A'(p- 1 ), K p /O p ) G ^ K ^ = Hom (X& cyc ,K p /O p ). 

□ 

Remark 2.2. We have rankA (/c TC )Af£ = 1 (see for example [Ru3, 
Th. 5.3(iii)]), so rank^X^-^ > 1. Thus, unlike the case of ordinary primes, 
the Selmer group Sel p (E / K cyc ) is not a co-torsion Aci-module. This makes the 
Iwasawa theory for supersingular primes more difficult than the ordinary case. 
In the next section, following Kobayashi [Ko], we will remedy this by defining 
two smaller Selmer groups which will both be co-torsion Aci-modules. 

3. Kobayashi's restricted Selmer groups 

If F is a finite extension of K in % let F p denote the completion of F 
at the unique prime above p, and for an arbitrary F with K C F C % let 
F p = UiyNp, union over finite extensions of K in F. For every such F let 
vcif denote the maximal ideal of F p and let E\{F P ) C E{F p ) be the kernel of 
reduction. Then E\{F p ) is the pro-p part of E(F p ) and we define the logarithm 
map to be the composition 

\ E : E(F P ) -» E X {F P ) E(m F ) — > F p 
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where the first map is projection onto the pro-p part, the second is the canonical 
isomorphism between the kernel of reduction and the formal group E, and the 
third is the formal group logarithm map. 

Definition 3.1. For n > let Q„ denote the extension of Q of degree 
p n in Qoo, and if n > m let Tr n / m denote the trace map from i£(Q niP ) to 
E(Q m , P )- For each n define two subgroups £+(Q njP ), (Q„, p ) C ^(Qn.p) by 

-E' + (Qn,p) = G ^(Qn,p) : Tfn/m^ G £(Q m -i, p ) if < m < n, m odd} 
E~{Q n ,p) = {x G E(Q njP ) : Tr n/rn x G £(Q m _i iP ) if < m < n, m even} 

and let E^(Q njP ) = ^(Q^p) l~l £i(Q n , p ). Equivalently, let ~ + (resp. S~) 
denote the set of nontrivial characters Gal(Q„/Q) — ► /x p n whose order is an 
odd (resp. even) power of p, and then 

^(Qnj?) = {x G S(Q n ,p) : E CTe cal(Q n /Q) x(^)^ = for every x G ^n) 

where the sum takes place in £ , (Q„ jP ) <8> Z [/*_„]. Note that when n = 1 we get 
£+(Q p ) = £T(Q p ) = E(Q p ). When n = oo we define 

E ± (Q 00 ,p) = U n £ ,± (Q niP ). 

We also define E^(KCl nt p) exactly as above with Q„ replaced by KQ n . The 
complex multiplication map £'(Q niP ) (g> O p — > E(KCl n)P ) induces isomorphisms 

(2) £l(Q„, p ) <g> O p £l(^Q n ,p), ^(Qn.p) ® Cp ^ ^f(^Qn,p) 

for every n < oo. 

Fix once and for all a generator {Cp n } of Z p (l), so Q p n is a primitive p n - 
th root of unity and C p n+i = Cp n - If X : F+ -» \i p k define the Gauss sum 

r (x) = EaeGal(Q(/l pfc )/Q) ^( a )Cpfc- 

Theorem 3.2 (Kobayashi [Ko]). 

(i) ^ + (Q„,p) + ^-(Qn, P ) = E(Q nj> ). 

(ii) £+(Q n , p ) n £T(Q n , p ) = £(Q P ). 

Further, there is a sequence of points d n G £i(Q n ,p) {depending on the choice 
of {C p n} above) with the following properties. 

/ ■ ■ ■ \ tv. . | d n-2 ifn>2, 
(m) ^/-^ = { ^d */n = l. 

(iv) //x : Gal(Q n /Q) /x p „ tftera 

£ x(<x)A £ «) = 

aeGal(Q„/Q) 



(-l)[f] r (x) */n>0, 
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(v) Ife= (-l) n then 

Et(Q n ,p) = Z p [Gal(Q n /Q)K t and E^(Q n>p ) = Z p [Gal(Q n _i/Q)]d n _i. 

Proof. The first two assertions are Proposition 8.12(ii) of [Ko]. 

Let d n = (-l) [2 ^ ] Tr Q(/Xpn+l)/QnC ; +1 where c' n+1 € £i(Q(/i p „+i) p ) cor- 
responds to the point c n+ \ € E(Q(/j, pn +i) p ) defined by Kobayashi in Section 4 
of [Ko]. Then the last three assertions of the theorem follow from Lemma 8.9, 
Proposition 8.26, and Proposition 8.12(i), respectively, of [Ko]. □ 

Definition 3.3. If < n < oo we define Kobayashi's restricted Selmer 
groups SefOE/Q,,) C Se\ p (E/Q n ) by 

Se\±(E/Q n ) = ker(sel p (£/Q n ) -> H 1 (Q n:P , E\p°°}) / (E± (Q n , p ) ® Q p /Z p )). 

Since £7(Q n ,u) <8> Q P /Z p = when t> \ p, a class c € H 1 (Q n , E\p°°}) belongs to 
Selp (E/Q n ) if and only if its localizations c v € H 1 (Q niV , E[p°°]) satisfy c v = 
if v \ p and 

c p G image (V(Q n , p ) ® Q p /Z p -> ^(Q^, £[p°°])) . 

(If we replace £ ;± (Q raiP ) by £?(Q„ )P ) we get the definition of Sel p (E/Q n ).) 

We define Sel^ (E/K cyc ) in exactly the same way with Q ra replaced by 
KQ n , using E^ 1 (i^Q n) p) , and then 

SelJ^/Qoo) ® O p = SeLt(£/^ cyc ). 



4. The Kummer pairing 

The composition 

£(K P ) (g) Q p /Z p — fT^OCp, ^b°°]) Hom(G Xp , E\p°°]) 

— ► Hom(W, £[p°°]) Homo^p- 1 ), K p /O p ), 

where the third map is induced by the inclusion U Gx p of local class field 
theory, induces an O p -linear Kummer pairing 

(3) (E(X P ) ® Q p /Z p ) x ^(p- 1 ) -> 

Proposition 4.1. T/ie Kummer pairing of (3) induces an isomorphism 

U p Kcyc = Hom (E(K cyc , p ) ® Q p /Z p , K p /O p ). 
Proof. This is equivalent to Proposition 5.4 of [Ru2]. □ 
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Definition 4.2. Define C ^° be the subgroup of W£ corre- 

sponding to Roma (E (K cyCt p) I 'E ± {K cyCiP ) <g> Q p /Z p , K p /O p ) under the isomor- 
phism of Proposition 4.1. Since Homo( • ,K p /O p ) is an exact functor on 
Op-modules we have 

(4) E ± (K cyc , p ) ® Q P /Z P = Hom (^ cyc /V ± , K p /O p ), 

(5) KJ^ = Hom (E ± (K cyc ^ ® Q p /Z p , 



Let a : — > A' be the Artin map of global class field theory. The following 
theorem is the step labeled (a') in the introduction. 

Theorem 4.3. Sel^{E/K cyc ) = Hom (^ cyc /a(V ± ), K p /O p ). 

Proof. This is Theorem 2.1 combined with Definition 3.3 of Sel^ (E/K cyc ) 
and (4). □ 

Proposition 4.4. (i) U p Koo is free of rank two over A (K 00 ) and U p K ^ c 
is free of rank two over An ■ 

(ii) andUj^ /V^ are free of rank one over An. 

(iii) There is a (noncanonical) submodule C Uk x whose image in 

is and such that andU^^/V^ are free of rank one over Ao(K 0O ). 

Proof. By [Gr], is free of rank two over An(Koo), and then the 

definition of shows that is free of rank two over An. Theorem 6.2 

**-cyc ^cyc 

of [Ko] (see also Theorem 7.1 below) and (5) show that U P K ^JV~^ is free of 

rank one over An, so the exact sequence — > V^ 1 — > U p Kc — ► C /V =t — > 

splits. Thus is a projective A^-module, and Nakayama's lemma shows that 
every projective Aei-module is free. This proves (ii). 

Let u be any element of whose image in lit- generates V™, and let 

"oo -"-eye 

= Ani^K^u. Then is free of rank one, and it follows from (ii) and 
Nakayama's lemma that /V^ is free of rank one over An(Koo) as well. 

□ 

5. Elliptic units and the explicit reciprocity law 

Let ipE denote the Hecke character of K attached to E, and for every 
character x °f finite order of Gk let L(ipEXi s ) denote the Hecke L-function. If 
X is the restriction of a character of Gq then L(ipEX, s ) = L(E, x, s), the usual 
L-function of E twisted by the Dirichlet character x- Let fif; 6 R + denote the 
real period of a minimal model of E. 
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The explicit reciprocity law of Wiles [Wi] together with a computation 
of Coates and Wiles [CW] leads to the following theorem, which is the step 
labeled (b) in the introduction. 

Theorem 5.1. The Aq{K ^-module C P K of elliptic units is free of rank 
one over Ao(ET 00 ). It has a generator £ with the property that if K C F C K^, 
x € E(F P ), and % : Gal(F/K) — > /x p oo, then the Kummer pairing ( , } of (3) 
satisfies 

E X-\^®p-\i)=p- k L{ ^ xA) £ X -V)AsOO- 

(T€Gal(F/fsr) E a£Gal(F/K) 



Proof. See [Wi] and [CW, §5], or Theorem 7.7(i) of [Ru3] and Theorem 3.2 
and the proof of Proposition 5.6 of [Ru2]. □ 



Corollary 5.2. (i) The map C p K ^ c — > U^- is injective. 

(ii) C^ cyc is free of rank one over Aq and C p K ^ c n V + = C£; cyc flV" = 0. 

(iii) rank Ao(Koo) ^ oo = 1 and S p Kgo D V+ = ^ D V" = 0. 



Proof. Since C^- cyc and JV^ are free of rank one over Ae> (Theorem 

5.1 and Proposition 4.4(h)), the map Cx cyc — > /V^ is either injective or 
identically zero. Thus to prove both (i) and (ii) it will suffice to show that the 
image £ G of the generator £ £ of Theorem 5.1 satisfies £ ^ V + and 

Rohrlich [Ro] proved that L(E,x, 1)^0 for all but finitely many charac- 
ters x °f Gal(K CJC /K). Applying Theorem 5.1 with x = c?2 n for large n and 
using Theorem 3.2(iv) it follows that the image of £ in ~Rovo.q(E + (K cyc ^ p ) (£> 
Qp/Zp, Kp/Op) is nonzero. Hence £ ^ V + . Similarly, using the points cfen+i 
for large n shows that £ ^ V~. This proves (i) and (ii). 

By Corollary 7.8 of [Ru3], is a torsion-free, rank-one Aq^oo) -module. 
Just as in (i), since U^^/V^ is torsion- free (Proposition 4.4(iii)) the map 
Ex — y U^^/V^ is either injective or identically zero. But we saw above that 
£ £ V ± , so £ ^ and E P K — > Z^- /V ± is not identically zero. This proves 
(iii). "' □ 

6. The characteristic ideals 

If B is a finitely generated torsion module over Ao(X 00 ) (resp. Aq, 
resp. A), we will write char^ t K \(B) (resp. charA (-B), resp. charA(-B)) for 
its characteristic ideal. 
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The following theorem is Theorem 4.1(h) of [Ru3], twisted by p 1 . It is 
the step labeled (c) in the introduction. 

Theorem 6.1 ([Ru3]). The A a {K ^-modules A p Koo and £ p K JC p Koo are 
finitely generated and torsion, and 

char Ko[Koo) {A p K J = cYi&i Ko(Koo) {£ p Koo /C p K J. 

Corollary 6.2. Let a : U —> X denote the Artin map of global class 
field theory. Then X^^/aty^) and Z^^- oo /(V ± + Cj^- 00 ) are finitely generated 
torsion Ao(K ^-modules and 

char Ao(Koo) (^ oo /a(V ± )) = &m Ko{Koo) {U p k J {V± + C P K J). 

Proof. Class held theory gives an exact sequence 

— >£/C — >U/C X — >A^tt. 

Twisting by p~ l and using the fact that A has order prime to p gives another 
exact sequence 

— /C p K -^U P K /C P K X p K -^A P K — 0. 

Since D = by Corollary 5.2, we get finally an exact sequence 

(6) - £ p K JC p Koo - U P K J(V± + C p K J ^ X p K Ja(V±) - A p Koc - 0. 

Since n V ± = 0, it follows from Theorem 5.1 and Proposition 4.4 that 
the quotient U^^jiy^ +C p Koo ) is a hnitely generated torsion Ao(ivT 00 )-module. 
Now (6) and Theorem 6.1 show that X^ /a(V^) is a hnitely generated torsion 
^o(-^oo)- m odule as well, and that the two characteristic ideals are equal. □ 

Theorem 6.3. The A -modules /otiy* 1 ) and /(V* + C p Kcy J 
are finitely generated torsion modules and 

char Ao (^ cyc /a(V ± )) = char Ao (^ cyc /(V ± + C P K J). 
Further, /otQ?^) has no finite Ao-submodules. 

The proof of Theorem 6.3 is given below, after a few lemmas. The proof 
is essentially contained in Section 11 of [Ru3], but since it is crucial for our 
main result we recall some of the details. 

If 21 is an ideal of Ac>(i^ 00 ), let 21 C Aq denote the image of 21 under 
the projection map Ao(ET 0O ) -» Aq. Fix a topological generator 7* of T_ = 
Gal(iW^cyc). 

Lemma 6.4. Suppose B is a finitely generated torsion Aq(K ^-module 
with no nonzero pseudo-null submodules. Then 

charAo^oojC-B) */ an d on ^V tf ^/(l* ~ ^ s a torsion Ap-module, 
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and in that case 

char Ao (5/(7, - 1)B) = char Ao(Xoo) (5). 

Proof. See Lemma 4 of [PR1, §1.1.3] or Lemma 6.2 of [Ru3]. □ 

Lemma 6.5. Suppose B is a finitely generated Aq{K ^-module with no 
nonzero pseudo-null submodules. If B' is a free Ani^K^-submodule of B then 
B/B' has no nonzero pseudo-null submodules. 

Proof. By induction we may reduce to the case that B' is free of rank one, 
and may reduce further to the case that B/B' is pseudo-null. Since An^K^) 
is a unique factorization domain it follows that B = B' . □ 

Lemma 6.6. Suppose B is a finitely generated torsion An{K ^-module 
with no nonzero pseudo-null submodules, and both 5/(7* — 1)B and 
5/(7* — P~ l {l*))B are torsion An-modules. Then 5/(7* — 1)B has a nonzero 
finite submodule if and only if B/fa* — p -1 ^*))!? has. 

Proof. This is Lemma 11.15 of [Ru3] □ 

Proof of Theorem 6.3. By Proposition 4.4 and Corollary 5.2, Uj( cyc and 
+ C p u are free of rank two over An, and U p u and + C p u are free of 

"eye "co "00 

rank two over Ao(i^ 00 ). Therefore (using Lemma 6.5) U P K /(V^ + C^ ) and 
I (y^+C-K ) are torsion modules with no nonzero pseudo-null submodules. 
By Lemma 6.4 it follows that 

(7) char Ao {KJ{V± + C P K J) = ch a r Ao(Kx) (U p K J(V±+C p K J) + 0. 

Class field theory shows that the kernel of a : U P K ^ — > X^ is ■ 
Therefore by Corollary 5.2 a is injective on V^, so aiy^ 1 ) is a free, rank-one 
Ao(Koo)-submodule of X^ . By [Gr], rank^^^.Yj^ = 1 and X^ has 
no nonzero pseudo-null submodules, so (using Lemma 6.5) X^ /a(y ± ) is a 
torsion Aei(i(' 00 )-module with no nonzero pseudo-null submodules. Further, 
Corollary 6.2 and (7) show that 

(8) char Ao( ^ oo) (^ oo /a(V±)) = chax Ao(/foo) (W^ oo /(V± + C P K J) ± 0. 
Thus we can apply Lemma 6.4 to conclude that 

char Ao (^ cyc /«(V ± )) = char Ao(i , oo) (^ oo /a(V±)), 
and together with (7) and (8) this proves 

char Ao (*£ /a(V±)) = char Ao (U P K /(V± + C p )). 
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It remains to prove that X P K /a(V ± ) has no nonzero finite submodules. 
This will follow from Lemma 6.6. We give the argument briefly here; see the 
proof of Theorem 11.16 of [Ru3] for more details. 

We can identify <^ /(7* — P~ 1 (l*))^K oc w * tn a SUD g rou P °f 

(X/(^-l)X){p~ l ). 

Standard techniques (for example [Gr, §2]) identify <^/(7* — 1)X with a sub- 
group of Gal(Mo / K cyc (E\p])) where Mq is the maximal abelian p-extension 
of K cyc (E[p\) unramified outside p, and by [Gr], Gal(Mo / K cyc (E\p])) has no 
nonzero finite submodules. Hence /(7* — P~ 1 (i*))Xk oc has no nonzero 
finite submodules. 

Let B = Xft /a(V±). Lemma 6.5 now shows that -B/(7* — p~ 1 ( , y*))B has 
no nonzero finite submodules, and we observed above that B has no nonzero 
pseudo-null submodules, so Lemma 6.6 shows that B/^ — 1)B = A?£ /a^V 1 * 1 ) 
has no nonzero finite submodules. □ 

7. Local units, elliptic units, and the p-adic L-functions 

Fix a topological generator 7 of T + = Gsl(K cyc /K) = Gal(Qoo/Q). For 
every n > 1 define 

^ = E7^" 1 eA 

i=0 

and define G A by 

^ = n v » u n = n 

l<i<n,2\i l<i<n,2\i 



Theorem 7.1 (Kobayashi [Ko]). The k -module 

Hom( J B ± (Q 00iP ) ® Q p /Z p , Q p /Z p ) 

is free of rank one, with a generator p^ such that for every k,n G Z + , 
every character % : Gal(Q„/Q) — > /* „, 

CTGGal(Q„/Q) 

Proof. An easy exercise shows that for < n < 00 

(9) Hom(^ ± (Q n , p ) <g> Q p /Z p , Q p /Z p ) = Hom(S ± (Q n , p ), Z p ). 

In Section 8 of [Ko], especially Proposition 8.18 and Theorem 6.2, Kobayashi 
shows that for every n and e = ±1, the map 

, f £ CT6 Gal(CWQ)/K> if (-1)" =£ 
7 \ £*=Gal(Q„/Q) if (-!)» = -£ 
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is an isomorphism from Hom(i? e (Q TtiP ), Z p ) to o;~ e Z p [Gal(Q ra /Q)], and that 
for m > n > 1 these maps are compatible in the sense that the following 
diagram commutes 

Hom(^ ± (Q m , p ),Z p ) w£Z p [Gal(Q m /Q)] 



Hom(£±(Q niP ),Z p ) ^Z p [Gal(Q n /Q)]. 

Here the left-hand vertical map is restriction, and the right-hand vertical map 
sends to^ to uj J. 

In the limit it follows ([Ko] Theorem 6.2) that Hom(£ ,± (Q 00jP ), Z p ) is free 
of rank one over A with a generator f± satisfying E<TeGai(Q„/Q) f±( d n)°' = Un- 
it we take / u ± to be the map corresponding to f± under (9), then jj^ satisfies 
the conclusions of the theorem. □ 

Let <G A denote the p-adic L-functions defined by the first author in 
Section 6.2.2 of [Po]. These are characterized by the formulas 

(10) x(£±) = (-1)(" +1 V 2 T (X) L (E X,l) . f ^ ^ pH w . th n odd ^ 

x(^rl) Me 

(11) X (£e) = (~l) W/2+1 if ^ hag Qrder pU > 1 with n eyen _ 

In addition, if xo is the trivial character then 

(12) Xo(C + E ) = (p-l)^§f, xo(C~ E ) = 2^. 

Theorem 7.2. There is an isomorphism U P K /{V ± +C P K )^K /C%K . 



Proof. By (5) and (2) we have 

U kJ^ = Hom (E ± (K cyc ^ ®Q P /Z P , K p /O p ) 

Hom(^ ± (Q 00>p ) ® Q p /Z p , K p /O p ) 

Hom( J B ± (Q OOiP )«)Q p /Z p ,Q p /Z p )0O p . 

Let / u ± be as in Theorem 7.1, let £ be the generator of C P K from Theorem 5.1, 
and let ip^ be the image of £ in Homo(£ ± (K cyc #) <g> Q p /Z p , E'fp 00 ]). For some 
/i ± G Ae> we have 

(13) ^ = h ± fi ± , 

and then ^ cyc /(V± + C P K J - Ao/Z^Ac 

It follows from (13) that for every k,n > 1 and every nontrivial character 
X : T+ -> /i p n, 

<r6Gal(Q n /Q) crGGal(Q n /Q) 



MAIN CONJECTURE FOR SUPERSINGULAR PRIMES 



461 



Using the formulas of Theorems 3.2(iv) and 5.1 to compute the left-hand side, 
and Theorem 7.1 for the right-hand side, we deduce that if the order of x is 
p n > 1 and e = (-l) n+1 then 

L(E X,1 \ -^ ] r(x) = X(^)XK) (mod p k ) 
\Ie 

for every k. It follows from (10) and (11) that h± = -C% □ 
The following theorem is our main result. 
Theorem 7.3. char A (Hom(Sel^(£;/Q 00 ), Q P /Z P )) = £±A. 
Proof. We have 

ch a i Ao (Rom (Se^(E/K cyc ),K p /O p )) = char Ao (^ cyc /a(V ± )) 



= chax Ao (W' /(V^ + Ct J) 



Vcyc 



= C%Ao 

by Theorems 4.3, 6.3, and 7.2, respectively. Since 

Sel±(E/K cyc ) = Sel^/Qoo) ® O p , 

we also have 

Rom (Sel^ (E/K cyc ),K p /O p ) = Hom(Sel±(£;/Q 00 ), ^ p /O p ) 

= Hom(Sel±( J B/Q 00 ), Q p /Z p ) O p 

and the theorem follows. □ 



8. Applications 

We describe briefly the basic applications of the supersingular main con- 
jecture. As in the previous sections, we assume that E is an elliptic curve 
defined over Q, with complex multiplication by the ring of integers of an imag- 
inary quadratic field K, and p is an odd prime where E has good supersingular 
reduction. For this section we write V = T + , so A = Z p [[r]]. 

Remark 8.1. The results below also hold for primes of ordinary reduc- 
tion, and can be proved using the main conjecture for ordinary primes. 

The following application was already proved in [Ru3], as an application 
of Theorem 6.1. 

Theorem 8.2 ([Ru3, Th. 11.4]). If L(E, 1) + 0, then E(Q) is finite and 

. LIE A) 
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where r € Q x satisfies ord p (r) = 0, as predicted by the Birch and Swinnerton- 
Dyer conjecture. 

If L(E, 1) = 0, then either E(Q) is infinite or Ul(E)\p°°] is infinite. 

Before proving Theorem 8.2 we need the following lemma. 

Lemma 8.3. The natural restriction map Se\ p (E/Q) — > Sel p (.E/Qoo) r is 
an isomorphism. 

Proof. For every number field F let Se\' p (E/F) denote the Selmer group 
of E over F with no local condition at p: 

Se\' p (E/F) = ker : E]p°°]) -> ®^H\F V , E{p°°]) 

(note that E(F V ) <g> Q p /Z p = when v \ p). Thus we have a commutative 

diagram 

(14) 

— Sel p (£/Q) — Sel p (£/Q) — > ^(Qp, 

— Sel±(£/Qoo) r — Sei;(i?/Q 00 ) r — > H^Q^, E[p™])/A± 

where A and ^4^, are the images of E(Q P ) ® Q p /Z p and ^ ± (Q o, p ) <8> Q p /Z p , 
respectively, and the vertical maps are restriction maps. It follows from the 
theory of complex multiplication that £?(Qoo, p ) has no p-torsion, and then 
standard methods (see for example Proposition 1.2 of [Rul]) show that the 
restriction maps 

H\Q p ,E\p°°}) - tf 1 (Q 00 , p ,£[p 00 ]) r , Se\' p (E/Q) -> Sei;(i?/Q 00 ) r 
are isomorphisms. 

We will show that for every n the map E(Q P ) <g> Q p /Z p — > (S ± (Q raiP ) <8> 
Q p /Z p ) r is surjective. It will then follow that the right-hand vertical map in 
(14) is injective, and then (using the remarks above and the snake lemma) that 
the left-hand vertical map in (14) is an isomorphism, which is the assertion of 
the lemma. 

To show that E(Q P ) <g) Q p /Z p — > (£ ,± (Q„ iP ) ® Q p /Z p ) r is surjective it 
suffices to check that dimF p (-E ± (Q ra ,p) <8> F p ) r = 1, since E(Q p ) <g) Q p /Z p = 
Q p /Z p . Identify F p [Gal(Q n /Q)] with F p [X]/(XP n - 1) = F p [X]/(X - l)v n . 
Since £^ ± (Q niP ) is cyclic over Z p [Gal(Q n /Q)] (Theorem 3.2(v)), 

E ± (Q n , p )®F p ^F p [X]/(X -l) a 

for some a > 0. Under this identification (£ ,± (Q njP ) (8) F p ) r is the kernel of 
X — 1, which is visibly one-dimensional. □ 
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Proof of Theorem 8.2. By Lemma 8.3 we have 

|Sel p (£/Q)| = |Hom(Sel p (^/Q),Q p /Z p )| 

= |Hom(Sel±(^/Q 00 ) r ,Q p /Z p )| 

= |Hom(Sel p t (^/Q 00 ), Q p /Z p ) <8>a Z p |. 

By Theorems 4.3 and 6.3, Hom(Selp(.E/Qoo)j Qp/Zp) has no nonzero finite 
submodules, and by Theorem 7.3 its characteristic ideal is C%K. Writing xo 
for the trivial character of T, standard techniques (for example [PR1, Lemma 4 
of §1.1.3]) show that 

|Hom(Sel p t (^/Q 00 ), Q p /Z p ) ® A Z p \ = |Z p / X o(£|)Z p | = \Z p /(L(E, l)/fi B )Z p | 
using (12) for the last equality. This proves the theorem. □ 

Fix a generator 7 of T. Define = 7 — 1 and for every n > 1 let 
u n = X)f=o 7* P ™ ■ If X is a character of T of finite order, let Z p [x] denote the 
ring obtained by adjoining the values of x to Z p . We view Z p [x] as a A- module 
with r acting via x> and if M is a A-module we define M x = M ®\Z p [x}- Then 
x{ v m) = if and only if the order of x 1S V m 1 an d if M is finitely generated 
or co-finitely generated over Z p and x nas order p m , then M x is infinite if and 
only if M Um=0 is infinite, where M Um=0 is the kernel of v m on M. 

For every n write G n = Gal(Q n /Q). 

Theorem 8.4. Suppose x is a character of G n . If L(E,xA) then 
E(Q n )x and UI(E/Q n )* are finite. If L(E, X ,l) = then either E(Q n )* is 
infinite or IU(E/Q n ) x is infinite. 

Before proving Theorem 8.4 we need the following lemma. 

Lemma 8.5. Suppose x is a character of G n of order p m > 1, and let 
£ = (-1)™. Then Sel £ p (E/Q n y™=° is infinite if and only if Sel p (E / Q n ) u ™=° 
is infinite. 

Proof. We have Sel p (E/Q n ) C Se\ p (E/Q n ), so one implication is clear. 
Suppose now that Sel p (E/Q n ) Um=0 is infinite. By Proposition 10.1 of [Ko], 
either Sel £ p (E / Q n y™= or Sel~ £ ( J B/Q n )^ m=0 must be infinite. But localiza- 
tion at p sends Sel~ e (£'/Q n )^ m=0 into E~ £ (Q n , P ) Um=0 which is zero, and so 
Sel- £ (E/Q n y™=° C Sel p (£/Q n )^ =0 . Hence Sel £ p (E / Q n ) v ™=° is infinite. □ 

Proof of Theorem 8.4. Let p m be the order of x- If m = then the 
theorem is a consequence of Theorem 8.2. So we may suppose m > 1, and we 
let e = {-l) m . 

Sel p (£/Q n )x is infinite ^> Sel p (E / Q n ) u ™=° is infinite 

Sel!(£/Q n )^ =0 is infinite 
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<=^> Sel^( J B/Q oo )^ =0 is infinite 
<^=> Hom(Sel£(£/Qoo), Q p /Z p ) ® A/u m is infinite 
A/(£ £ E ,v m ) is infinite 

^ x(£e) = o 

L(E, X ,1)=0 

using Lemma 8.5, Theorem 9.3 of [Ko], Theorem 7.3, and (10) and (11). □ 

University of Chicago, Chicago IL 
E-mail address: pollack@math.uchicago.edu 

Stanford University, Stanford CA 
E-mail address: rubin@math.stanford.edu 



References 

[AV] Y. Amice and J. Velu, Distributions p-adiques associees aux series de Hecke, in Journees 

Arithmetiques de Bordeaux [Univ. Bordeaux, Bordeaux, 1974) 119-131, Asterisque 

24-25, Soc. Math. France, Paris, 1975. 
[CW] J. Coates and A. Wiles, On the conjecture of Birch and Swinnerton-Dyer, Invent. 

Math. 39 (1977) 223-251. 
[Gr] R. Greenberg, On the structure of certain Galois groups, Invent. Math. 47 (1978) 

85-99. 

[Ka] K. Kato, p-adic Hodge theory and values of zeta functions of modular forms, preprint. 
[Ko] S. Kobayashi, Iwasawa theory for elliptic curves at supersingular primes, Invent. Math. 
152 (2003) 1-36. 

[Ma] B. Mazur, Rational points of abelian varieties with values in towers of number fields, 

Invent. Math. 18 (1972) 183-266. 
[MSD]B. Mazur and P. Swinnerton-Dyer, Arithmetic of Weil curves, Invent. Math. 25 (1974) 

1-61. 

[MTT]B. Mazur, J. Tate, and J. Teitelbaum, On p-adic analogues of the conjectures of Birch 

and Swinnerton-Dyer, Invent. Math. 84 (1986) 1-48. 
[PR1] B. Perrin-Riou, Arithmetique des courbes elliptiques te theorie d'lwasawa, Bull. Soc. 

Math. France Suppl. Memoire 17 (1984). 
[PR2] , Theorie d'lwasawa p-adique locale et globale, Invent. Math. 99 (1990), 247- 

292. 

[PR3] , Fonctions L p-adiques d'une courbe elliptique et points rationnels, Ann. Inst. 

Fourier 43 (1993) 945-995. 
[Po] R. Pollack, On the p-adic L-function of a modular form at a supersingular prime, 

Duke Math. J. 118 (2003), 523-558. 
[Ro] D. Rohrlich, On L-functions of elliptic curves and cyclotomic towers, Invent. Math. 

75 (1984) 409-423. 

[Rul] K. Rubin, Elliptic curves and Z p -extensions, Compositio Math. 56 (1985) 237-250. 

[Ru2] , Local units, ellitpic units, Heegner points, and elliptic curves, Invent. Math. 

88 (1987) 405-422. 

[Ru3] , The "main conjectures" of Iwasawa theory for imgainray quadratic fields, 

Invent. Math. 103 (1991) 25-68. 
[Wi] A. Wiles, Higher explicit reciprocity laws, Ann. of Math. 107 (1978) 235-254. 



(Received November 14, 2002) 



